diff --git a/class/defaults.yml b/class/defaults.yml index 9ad2c6805..5efa187b8 100644 --- a/class/defaults.yml +++ b/class/defaults.yml @@ -132,7 +132,7 @@ parameters: charts: cilium: source: https://helm.cilium.io - version: "1.16.4" + version: "1.16.10" cilium-enterprise: source: "" # Configure the Chart repository URL in your global defaults version: "1.16.4" diff --git a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml index 7d7504428..bfaa1fb64 100644 --- a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml +++ b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml @@ -54,7 +54,7 @@ spec: resourceFieldRef: divisor: '1' resource: limits.memory - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent lifecycle: postStart: @@ -93,6 +93,8 @@ spec: httpHeaders: - name: brief value: 'true' + - name: require-k8s-connectivity + value: 'true' path: /healthz port: 9879 scheme: HTTP @@ -178,6 +180,9 @@ spec: name: bpf-maps - mountPath: /var/run/cilium name: cilium-run + - mountPath: /var/run/cilium/netns + mountPropagation: HostToContainer + name: cilium-netns - mountPath: /host/etc/cni/net.d name: etc-cni-netd - mountPath: /var/lib/cilium/clustermesh @@ -206,7 +211,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: config terminationMessagePolicy: FallbackToLogsOnError @@ -225,7 +230,7 @@ spec: value: /run/cilium/cgroupv2 - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-cgroup securityContext: @@ -255,7 +260,7 @@ spec: env: - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: apply-sysctl-overwrites securityContext: @@ -281,7 +286,7 @@ spec: - /bin/bash - -c - -- - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-bpf-fs securityContext: @@ -312,7 +317,7 @@ spec: key: write-cni-conf-when-ready name: cilium-config optional: true - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: clean-cilium-state securityContext: @@ -338,7 +343,7 @@ spec: name: cilium-run - command: - /install-plugin.sh - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: install-cni-binaries resources: @@ -371,6 +376,10 @@ spec: path: /var/run/cilium type: DirectoryOrCreate name: cilium-run + - hostPath: + path: /var/run/netns + type: DirectoryOrCreate + name: cilium-netns - hostPath: path: /sys/fs/bpf type: DirectoryOrCreate diff --git a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml index d0975bb29..adb041317 100644 --- a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml +++ b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml @@ -11,7 +11,6 @@ data: bpf-lb-external-clusterip: 'false' bpf-lb-map-max: '65536' bpf-lb-sock: 'false' - bpf-lb-sock-terminate-pod-connections: 'false' bpf-map-dynamic-size-ratio: '0.0025' bpf-policy-map-max: '16384' bpf-root: /sys/fs/bpf @@ -66,6 +65,7 @@ data: enable-vtep: 'false' enable-well-known-identities: 'false' enable-xt-socket-fallback: 'true' + envoy-access-log-buffer-size: '4096' envoy-base-id: '0' envoy-keep-cap-netbindservice: 'false' external-envoy-proxy: 'false' diff --git a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml index ae3f1ce51..6c4ed08cb 100644 --- a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml +++ b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml @@ -59,7 +59,7 @@ spec: key: debug name: cilium-config optional: true - image: quay.io/cilium/operator-generic:v1.16.4@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5 + image: quay.io/cilium/operator-generic:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml index 33125e408..fe13c262c 100644 --- a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml +++ b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml @@ -1,6 +1,6 @@ apiVersion: v1 data: - config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local:80\"\ + config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local.:80\"\ \nlisten-address: :4245\ngops: true\ngops-port: \"9893\"\ndial-timeout: \nretry-timeout:\ \ \nsort-buffer-len-max: \nsort-buffer-drain-timeout: \ndisable-client-tls: true\n\ \ndisable-server-tls: true\n" diff --git a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml index 32db1394b..9f0c747b4 100644 --- a/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml +++ b/tests/golden/bgp-control-plane/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml @@ -37,7 +37,7 @@ spec: - serve command: - hubble-relay - image: quay.io/cilium/hubble-relay:v1.16.4@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2 + image: quay.io/cilium/hubble-relay:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 12 diff --git a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml index 7d7504428..bfaa1fb64 100644 --- a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml +++ b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml @@ -54,7 +54,7 @@ spec: resourceFieldRef: divisor: '1' resource: limits.memory - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent lifecycle: postStart: @@ -93,6 +93,8 @@ spec: httpHeaders: - name: brief value: 'true' + - name: require-k8s-connectivity + value: 'true' path: /healthz port: 9879 scheme: HTTP @@ -178,6 +180,9 @@ spec: name: bpf-maps - mountPath: /var/run/cilium name: cilium-run + - mountPath: /var/run/cilium/netns + mountPropagation: HostToContainer + name: cilium-netns - mountPath: /host/etc/cni/net.d name: etc-cni-netd - mountPath: /var/lib/cilium/clustermesh @@ -206,7 +211,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: config terminationMessagePolicy: FallbackToLogsOnError @@ -225,7 +230,7 @@ spec: value: /run/cilium/cgroupv2 - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-cgroup securityContext: @@ -255,7 +260,7 @@ spec: env: - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: apply-sysctl-overwrites securityContext: @@ -281,7 +286,7 @@ spec: - /bin/bash - -c - -- - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-bpf-fs securityContext: @@ -312,7 +317,7 @@ spec: key: write-cni-conf-when-ready name: cilium-config optional: true - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: clean-cilium-state securityContext: @@ -338,7 +343,7 @@ spec: name: cilium-run - command: - /install-plugin.sh - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: install-cni-binaries resources: @@ -371,6 +376,10 @@ spec: path: /var/run/cilium type: DirectoryOrCreate name: cilium-run + - hostPath: + path: /var/run/netns + type: DirectoryOrCreate + name: cilium-netns - hostPath: path: /sys/fs/bpf type: DirectoryOrCreate diff --git a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml index 76be991b7..7b1c68c12 100644 --- a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml +++ b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml @@ -10,7 +10,6 @@ data: bpf-lb-external-clusterip: 'false' bpf-lb-map-max: '65536' bpf-lb-sock: 'false' - bpf-lb-sock-terminate-pod-connections: 'false' bpf-map-dynamic-size-ratio: '0.0025' bpf-policy-map-max: '16384' bpf-root: /sys/fs/bpf @@ -64,6 +63,7 @@ data: enable-vtep: 'false' enable-well-known-identities: 'false' enable-xt-socket-fallback: 'true' + envoy-access-log-buffer-size: '4096' envoy-base-id: '0' envoy-keep-cap-netbindservice: 'false' external-envoy-proxy: 'false' diff --git a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml index ae3f1ce51..6c4ed08cb 100644 --- a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml +++ b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml @@ -59,7 +59,7 @@ spec: key: debug name: cilium-config optional: true - image: quay.io/cilium/operator-generic:v1.16.4@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5 + image: quay.io/cilium/operator-generic:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml index 33125e408..fe13c262c 100644 --- a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml +++ b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml @@ -1,6 +1,6 @@ apiVersion: v1 data: - config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local:80\"\ + config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local.:80\"\ \nlisten-address: :4245\ngops: true\ngops-port: \"9893\"\ndial-timeout: \nretry-timeout:\ \ \nsort-buffer-len-max: \nsort-buffer-drain-timeout: \ndisable-client-tls: true\n\ \ndisable-server-tls: true\n" diff --git a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml index 32db1394b..9f0c747b4 100644 --- a/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml +++ b/tests/golden/defaults/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml @@ -37,7 +37,7 @@ spec: - serve command: - hubble-relay - image: quay.io/cilium/hubble-relay:v1.16.4@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2 + image: quay.io/cilium/hubble-relay:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 12 diff --git a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml index 7d7504428..bfaa1fb64 100644 --- a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml +++ b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml @@ -54,7 +54,7 @@ spec: resourceFieldRef: divisor: '1' resource: limits.memory - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent lifecycle: postStart: @@ -93,6 +93,8 @@ spec: httpHeaders: - name: brief value: 'true' + - name: require-k8s-connectivity + value: 'true' path: /healthz port: 9879 scheme: HTTP @@ -178,6 +180,9 @@ spec: name: bpf-maps - mountPath: /var/run/cilium name: cilium-run + - mountPath: /var/run/cilium/netns + mountPropagation: HostToContainer + name: cilium-netns - mountPath: /host/etc/cni/net.d name: etc-cni-netd - mountPath: /var/lib/cilium/clustermesh @@ -206,7 +211,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: config terminationMessagePolicy: FallbackToLogsOnError @@ -225,7 +230,7 @@ spec: value: /run/cilium/cgroupv2 - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-cgroup securityContext: @@ -255,7 +260,7 @@ spec: env: - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: apply-sysctl-overwrites securityContext: @@ -281,7 +286,7 @@ spec: - /bin/bash - -c - -- - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-bpf-fs securityContext: @@ -312,7 +317,7 @@ spec: key: write-cni-conf-when-ready name: cilium-config optional: true - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: clean-cilium-state securityContext: @@ -338,7 +343,7 @@ spec: name: cilium-run - command: - /install-plugin.sh - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: install-cni-binaries resources: @@ -371,6 +376,10 @@ spec: path: /var/run/cilium type: DirectoryOrCreate name: cilium-run + - hostPath: + path: /var/run/netns + type: DirectoryOrCreate + name: cilium-netns - hostPath: path: /sys/fs/bpf type: DirectoryOrCreate diff --git a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml index 3640a975c..2f9976242 100644 --- a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml +++ b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml @@ -10,7 +10,6 @@ data: bpf-lb-external-clusterip: 'false' bpf-lb-map-max: '65536' bpf-lb-sock: 'false' - bpf-lb-sock-terminate-pod-connections: 'false' bpf-map-dynamic-size-ratio: '0.0025' bpf-policy-map-max: '16384' bpf-root: /sys/fs/bpf @@ -65,6 +64,7 @@ data: enable-vtep: 'false' enable-well-known-identities: 'false' enable-xt-socket-fallback: 'true' + envoy-access-log-buffer-size: '4096' envoy-base-id: '0' envoy-keep-cap-netbindservice: 'false' external-envoy-proxy: 'false' diff --git a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml index ae3f1ce51..6c4ed08cb 100644 --- a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml +++ b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml @@ -59,7 +59,7 @@ spec: key: debug name: cilium-config optional: true - image: quay.io/cilium/operator-generic:v1.16.4@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5 + image: quay.io/cilium/operator-generic:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml index 33125e408..fe13c262c 100644 --- a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml +++ b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml @@ -1,6 +1,6 @@ apiVersion: v1 data: - config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local:80\"\ + config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local.:80\"\ \nlisten-address: :4245\ngops: true\ngops-port: \"9893\"\ndial-timeout: \nretry-timeout:\ \ \nsort-buffer-len-max: \nsort-buffer-drain-timeout: \ndisable-client-tls: true\n\ \ndisable-server-tls: true\n" diff --git a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml index 32db1394b..9f0c747b4 100644 --- a/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml +++ b/tests/golden/egress-gateway/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml @@ -37,7 +37,7 @@ spec: - serve command: - hubble-relay - image: quay.io/cilium/hubble-relay:v1.16.4@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2 + image: quay.io/cilium/hubble-relay:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 12 diff --git a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml index 7d7504428..bfaa1fb64 100644 --- a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml +++ b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml @@ -54,7 +54,7 @@ spec: resourceFieldRef: divisor: '1' resource: limits.memory - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent lifecycle: postStart: @@ -93,6 +93,8 @@ spec: httpHeaders: - name: brief value: 'true' + - name: require-k8s-connectivity + value: 'true' path: /healthz port: 9879 scheme: HTTP @@ -178,6 +180,9 @@ spec: name: bpf-maps - mountPath: /var/run/cilium name: cilium-run + - mountPath: /var/run/cilium/netns + mountPropagation: HostToContainer + name: cilium-netns - mountPath: /host/etc/cni/net.d name: etc-cni-netd - mountPath: /var/lib/cilium/clustermesh @@ -206,7 +211,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: config terminationMessagePolicy: FallbackToLogsOnError @@ -225,7 +230,7 @@ spec: value: /run/cilium/cgroupv2 - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-cgroup securityContext: @@ -255,7 +260,7 @@ spec: env: - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: apply-sysctl-overwrites securityContext: @@ -281,7 +286,7 @@ spec: - /bin/bash - -c - -- - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-bpf-fs securityContext: @@ -312,7 +317,7 @@ spec: key: write-cni-conf-when-ready name: cilium-config optional: true - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: clean-cilium-state securityContext: @@ -338,7 +343,7 @@ spec: name: cilium-run - command: - /install-plugin.sh - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: install-cni-binaries resources: @@ -371,6 +376,10 @@ spec: path: /var/run/cilium type: DirectoryOrCreate name: cilium-run + - hostPath: + path: /var/run/netns + type: DirectoryOrCreate + name: cilium-netns - hostPath: path: /sys/fs/bpf type: DirectoryOrCreate diff --git a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml index 76be991b7..7b1c68c12 100644 --- a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml +++ b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml @@ -10,7 +10,6 @@ data: bpf-lb-external-clusterip: 'false' bpf-lb-map-max: '65536' bpf-lb-sock: 'false' - bpf-lb-sock-terminate-pod-connections: 'false' bpf-map-dynamic-size-ratio: '0.0025' bpf-policy-map-max: '16384' bpf-root: /sys/fs/bpf @@ -64,6 +63,7 @@ data: enable-vtep: 'false' enable-well-known-identities: 'false' enable-xt-socket-fallback: 'true' + envoy-access-log-buffer-size: '4096' envoy-base-id: '0' envoy-keep-cap-netbindservice: 'false' external-envoy-proxy: 'false' diff --git a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml index ae3f1ce51..6c4ed08cb 100644 --- a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml +++ b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml @@ -59,7 +59,7 @@ spec: key: debug name: cilium-config optional: true - image: quay.io/cilium/operator-generic:v1.16.4@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5 + image: quay.io/cilium/operator-generic:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml index 33125e408..fe13c262c 100644 --- a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml +++ b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml @@ -1,6 +1,6 @@ apiVersion: v1 data: - config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local:80\"\ + config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local.:80\"\ \nlisten-address: :4245\ngops: true\ngops-port: \"9893\"\ndial-timeout: \nretry-timeout:\ \ \nsort-buffer-len-max: \nsort-buffer-drain-timeout: \ndisable-client-tls: true\n\ \ndisable-server-tls: true\n" diff --git a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml index 32db1394b..9f0c747b4 100644 --- a/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml +++ b/tests/golden/helm-opensource/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml @@ -37,7 +37,7 @@ spec: - serve command: - hubble-relay - image: quay.io/cilium/hubble-relay:v1.16.4@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2 + image: quay.io/cilium/hubble-relay:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 12 diff --git a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml index 7d7504428..bfaa1fb64 100644 --- a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml +++ b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml @@ -54,7 +54,7 @@ spec: resourceFieldRef: divisor: '1' resource: limits.memory - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent lifecycle: postStart: @@ -93,6 +93,8 @@ spec: httpHeaders: - name: brief value: 'true' + - name: require-k8s-connectivity + value: 'true' path: /healthz port: 9879 scheme: HTTP @@ -178,6 +180,9 @@ spec: name: bpf-maps - mountPath: /var/run/cilium name: cilium-run + - mountPath: /var/run/cilium/netns + mountPropagation: HostToContainer + name: cilium-netns - mountPath: /host/etc/cni/net.d name: etc-cni-netd - mountPath: /var/lib/cilium/clustermesh @@ -206,7 +211,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: config terminationMessagePolicy: FallbackToLogsOnError @@ -225,7 +230,7 @@ spec: value: /run/cilium/cgroupv2 - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-cgroup securityContext: @@ -255,7 +260,7 @@ spec: env: - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: apply-sysctl-overwrites securityContext: @@ -281,7 +286,7 @@ spec: - /bin/bash - -c - -- - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-bpf-fs securityContext: @@ -312,7 +317,7 @@ spec: key: write-cni-conf-when-ready name: cilium-config optional: true - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: clean-cilium-state securityContext: @@ -338,7 +343,7 @@ spec: name: cilium-run - command: - /install-plugin.sh - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: install-cni-binaries resources: @@ -371,6 +376,10 @@ spec: path: /var/run/cilium type: DirectoryOrCreate name: cilium-run + - hostPath: + path: /var/run/netns + type: DirectoryOrCreate + name: cilium-netns - hostPath: path: /sys/fs/bpf type: DirectoryOrCreate diff --git a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml index 76be991b7..7b1c68c12 100644 --- a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml +++ b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml @@ -10,7 +10,6 @@ data: bpf-lb-external-clusterip: 'false' bpf-lb-map-max: '65536' bpf-lb-sock: 'false' - bpf-lb-sock-terminate-pod-connections: 'false' bpf-map-dynamic-size-ratio: '0.0025' bpf-policy-map-max: '16384' bpf-root: /sys/fs/bpf @@ -64,6 +63,7 @@ data: enable-vtep: 'false' enable-well-known-identities: 'false' enable-xt-socket-fallback: 'true' + envoy-access-log-buffer-size: '4096' envoy-base-id: '0' envoy-keep-cap-netbindservice: 'false' external-envoy-proxy: 'false' diff --git a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml index ae3f1ce51..6c4ed08cb 100644 --- a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml +++ b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml @@ -59,7 +59,7 @@ spec: key: debug name: cilium-config optional: true - image: quay.io/cilium/operator-generic:v1.16.4@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5 + image: quay.io/cilium/operator-generic:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml index 33125e408..fe13c262c 100644 --- a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml +++ b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml @@ -1,6 +1,6 @@ apiVersion: v1 data: - config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local:80\"\ + config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local.:80\"\ \nlisten-address: :4245\ngops: true\ngops-port: \"9893\"\ndial-timeout: \nretry-timeout:\ \ \nsort-buffer-len-max: \nsort-buffer-drain-timeout: \ndisable-client-tls: true\n\ \ndisable-server-tls: true\n" diff --git a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml index 32db1394b..9f0c747b4 100644 --- a/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml +++ b/tests/golden/kubeproxyreplacement-strict/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml @@ -37,7 +37,7 @@ spec: - serve command: - hubble-relay - image: quay.io/cilium/hubble-relay:v1.16.4@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2 + image: quay.io/cilium/hubble-relay:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 12 diff --git a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml index 7d7504428..bfaa1fb64 100644 --- a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml +++ b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-agent/daemonset.yaml @@ -54,7 +54,7 @@ spec: resourceFieldRef: divisor: '1' resource: limits.memory - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent lifecycle: postStart: @@ -93,6 +93,8 @@ spec: httpHeaders: - name: brief value: 'true' + - name: require-k8s-connectivity + value: 'true' path: /healthz port: 9879 scheme: HTTP @@ -178,6 +180,9 @@ spec: name: bpf-maps - mountPath: /var/run/cilium name: cilium-run + - mountPath: /var/run/cilium/netns + mountPropagation: HostToContainer + name: cilium-netns - mountPath: /host/etc/cni/net.d name: etc-cni-netd - mountPath: /var/lib/cilium/clustermesh @@ -206,7 +211,7 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: config terminationMessagePolicy: FallbackToLogsOnError @@ -225,7 +230,7 @@ spec: value: /run/cilium/cgroupv2 - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-cgroup securityContext: @@ -255,7 +260,7 @@ spec: env: - name: BIN_PATH value: /var/lib/cni/bin - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: apply-sysctl-overwrites securityContext: @@ -281,7 +286,7 @@ spec: - /bin/bash - -c - -- - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: mount-bpf-fs securityContext: @@ -312,7 +317,7 @@ spec: key: write-cni-conf-when-ready name: cilium-config optional: true - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: clean-cilium-state securityContext: @@ -338,7 +343,7 @@ spec: name: cilium-run - command: - /install-plugin.sh - image: quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf + image: quay.io/cilium/cilium:v1.16.10@%!s() imagePullPolicy: IfNotPresent name: install-cni-binaries resources: @@ -371,6 +376,10 @@ spec: path: /var/run/cilium type: DirectoryOrCreate name: cilium-run + - hostPath: + path: /var/run/netns + type: DirectoryOrCreate + name: cilium-netns - hostPath: path: /sys/fs/bpf type: DirectoryOrCreate diff --git a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml index b22153a0f..fb77c3197 100644 --- a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml +++ b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-configmap.yaml @@ -10,7 +10,6 @@ data: bpf-lb-external-clusterip: 'false' bpf-lb-map-max: '65536' bpf-lb-sock: 'false' - bpf-lb-sock-terminate-pod-connections: 'false' bpf-map-dynamic-size-ratio: '0.0025' bpf-policy-map-max: '16384' bpf-root: /sys/fs/bpf @@ -65,6 +64,7 @@ data: enable-vtep: 'false' enable-well-known-identities: 'false' enable-xt-socket-fallback: 'true' + envoy-access-log-buffer-size: '4096' envoy-base-id: '0' envoy-keep-cap-netbindservice: 'false' external-envoy-proxy: 'false' diff --git a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml index ae3f1ce51..6c4ed08cb 100644 --- a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml +++ b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/cilium-operator/deployment.yaml @@ -59,7 +59,7 @@ spec: key: debug name: cilium-config optional: true - image: quay.io/cilium/operator-generic:v1.16.4@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5 + image: quay.io/cilium/operator-generic:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml index 33125e408..fe13c262c 100644 --- a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml +++ b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/configmap.yaml @@ -1,6 +1,6 @@ apiVersion: v1 data: - config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local:80\"\ + config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.cilium.svc.cluster.local.:80\"\ \nlisten-address: :4245\ngops: true\ngops-port: \"9893\"\ndial-timeout: \nretry-timeout:\ \ \nsort-buffer-len-max: \nsort-buffer-drain-timeout: \ndisable-client-tls: true\n\ \ndisable-server-tls: true\n" diff --git a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml index 32db1394b..9f0c747b4 100644 --- a/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml +++ b/tests/golden/l2-announcement/cilium/cilium/01_cilium_helmchart/cilium/templates/hubble-relay/deployment.yaml @@ -37,7 +37,7 @@ spec: - serve command: - hubble-relay - image: quay.io/cilium/hubble-relay:v1.16.4@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2 + image: quay.io/cilium/hubble-relay:v1.16.10@%!s() imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 12